CVE-2026-80562

A flaw was found in the Linux kernel's gpio: ml-ioh component. An incorrect spinlock type spinlockt was used in interrupt handling routines where a non-sleeping lock rawspinlockt was required. This could lead to invalid lock acquisition, potentially causing system instability or a denial of...

CVE-2026-74741

CVE-2026-74741 is a NULL pointer dereference in the Linux kernel's ngbe network driver, occurring in the non-MSI-X interrupt enabling path. When the driver operates in legacy INTx or single MSI mode, the wx->msix_entry pointer is not allocated or initialized, so calling NGBE_INTR_MISC(wx) dere...

Linux Distros Unpatched Vulnerability : CVE-2026-74741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or...

PT-2026-82121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ngbe driver during non-MSI-X interrupt enabling, such as in legacy INTx or single MSI modes. The issue arises because wx-msix entry is not...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: m68k: Fixed the spinlock race in kernel thread creation. Context switching ensures that the correct lock owner is retained during the switch from the “prev” task to the “next” task. This relies on interrupts remaining disabled...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: A race condition between handleposixcputimers and posixcputimerdel has been fixed. If a task that exits without autoreaping has already called exitnotify and calls handleposixcputimers from the IRQ, it can be...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hns: Fixed the use of spinunlockirqrestore, which is called with IRQs enabled. Fixed incorrect use of spinlockirq/spinunlockirq when spinlockirqsave/spinlockirqrestore was held. This issue was discovered through lock...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Do not generate an interrupt during bus reset. Now that the i2c-i801 driver supports interrupts, setting the KILL bit in an attempt to recover from a timed-out transaction triggers an interrupt. Unfortunately, the...

CVE-2026-72146

A flaw was found in the Linux kernel's dmaengine component. A race condition exists where an interrupt handler or thread may attempt to access uninitialized data structures immediately after an interrupt is requested but before proper initialization. This can lead to invalid memory access,...

Linux Distros Unpatched Vulnerability : CVE-2026-68464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt When using WIFI out-of-band wakeup, an irq xxx: nobody cared warning occurs. This...

Linux Distros Unpatched Vulnerability : CVE-2026-72141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine...

CVE-2026-72133

A flaw was found in the Linux kernel's spi: uniphier driver. The driver attempts to use an internal synchronization mechanism before it has been properly set up. If an interrupt occurs at a precise moment, the system may try to operate on this uninitialized mechanism, leading to unpredictable...

CVE-2026-72062

A flaw was found in the Linux kernel's gpio: mt7621 module. This vulnerability arises from non-atomic operations on shared interrupt trigger state. When mediatekgpioirqtype is called concurrently for different interrupts on the same bank, it can lead to an overwrite of configurations. This...

CVE-2026-12629

The Zephyr RTOS ARM PL011 UART driver's pl011_isr() only cleared CTS interrupts, never writing UARTICR for error bits. An attacker controlling a serial peer can inject line errors to trigger a permanent interrupt-storm livelock (availability DoS), CVSS 4.6 (MEDIUM). Fix commit: https://github.com...

CVE-2026-72486

A flaw was found in the Linux kernel's mtk-adsp mailbox driver. During device teardown, if the Sound Open Firmware SOF audio driver fails to initialize, a timing issue can occur where an interrupt is processed after the associated memory has been released. This Use-After-Free UAF vulnerability ca...

CVE-2026-68464

A flaw was found in the Linux kernel's sdhci-esdhc-imx driver. When the system enters suspend mode without disabling the usdhc interrupt, and a Wi-Fi out-of-band wakeup triggers a system resume, a card interrupt can be sent before the usdhc driver has fully resumed. This can result in an unhandle...

UBUNTU-CVE-2026-72409

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x, mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR mvnetapercpuisr calls disablepercpuirq to mask the MPIC per-CPU...

UBUNTU-CVE-2026-72294

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvmvcpuioctlinterrupt Function kvmvcpuioctlinterrupt can be called from userspace, here add irq validility cheking in kvmvcpuioctlinterrupt...

CVE-2026-72062

In the Linux kernel, the following vulnerability has been resolved: gpio: mt7621: avoid corruption of shared interrupt trigger state The bank-shared fields like 'rising' and 'falling' are modified using non-atomic read-modify-write operations. Since every gpio chip instance represents an entire...

UBUNTU-CVE-2026-72146

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is initialized only afte...